CVE-2020-22617

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-22617

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-22617.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2020-22617

Downstream

USN-5110-1

Published

2021-10-08T20:15:07Z

Modified

2026-05-18T13:28:56Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Ardour v5.12 contains a use-after-free vulnerability in the component ardour/libs/pbd/xml++.cc when using xmlFreeDoc and xmlXPathFreeContext.

References

Affected packages

Git / github.com/ardour/ardour

Affected ranges

Type

GIT

Repo

https://github.com/ardour/ardour

Events

Introduced

Last Affected

ae0dcdc0c5d13483271065c360e378202d20170a

Database specific

Show details

{
    "cpe": "cpe:2.3:a:ardour:ardour:5.12:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "5.12"
        }
    ],
    "source": "CPE_FIELD"
}

Affected versions

2.*

2.0beta10

2.0beta11

2.0beta11.1

2.0beta12

2.0beta4

2.0beta5

2.0beta5.1

2.0beta6

2.0beta6.1

2.0beta7

2.0beta7.1

2.0beta8

2.0beta9

2.0rc1

3.*

3.0

3.0-alpha1

3.0-alpha10

3.0-alpha2

3.0-alpha5

3.0-alpha6

3.0-alpha8

3.0-alpha9

3.0-beta1

3.0-beta2

3.0-beta3

3.1

3.2

3.3

3.4

3.5

3.5.14

3.5.143

3.5.308

3.5.357

3.5.380

3.5.403

3.5.74

4.*

4.1

4.2

4.3

4.4

4.5

4.6

4.7

5.*

5.0

5.0-pre0

5.0-pre1

5.0-rc1

5.0-rc2

5.1

5.10

5.11

5.12

5.2

5.3

5.4

5.5

5.6

5.7

5.8

5.9

Other

a3-alpha7

prercu

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-22617.json"